AI Identity and Access Management Consulting Director
You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.
The Consulting Director, AI Identity & Access Management (IAM) is a strategic and hands-on leader responsible for advancing CNA’s modern IAM capabilities through the application of artificial intelligence, automation, and next-generation identity governance.This role focuses on governing AI agents as non-human identities, driving intelligent automation, and improving end-user experience across IAM services. The position partners across Security, AI Governance, Engineering, and Business teams to ensure AI-enabled identity solutions are secure, scalable, and aligned with enterprise governance standards.
JOB DESCRIPTION:
Key Responsibilities
AI Identity Governance (Core Pillar)
- Lead the design and implementation of AI Agent Identity Governance, ensuring all agents are treated as first-class non-human identities with defined ownership, lifecycle, and access controls.
- Establish and operationalize controls for:
- Identity registration, ownership, and accountability
- Secure authentication and credential management
- Fine-grained authorization and least privilege enforcement
- Auditability and traceability of all agent actions
- Define and enforce separation of user vs. agent identity context to reduce risk and blast radius.
- Accelerate the adoption of AI usage in the IAM space
- Partner with AI Governance, Security, Legal, and Compliance teams to align with enterprise AI policy and approval processes.
AI-Driven IAM Transformation & Automation
- Drive adoption of AI-powered IAM capabilities, including:
- Intelligent role mining and access optimization
- Unified identity risk scoring
- Automated access decisioning and lifecycle workflows
- AI-enabled identity analytics and anomaly detection
- Identify and implement opportunities to eliminate manual processes across provisioning, certification, and access reviews.
- Leverage AI and orchestration tools to deliver scale, consistency, and auditability in IAM operations.
End User Experience & Self-Service Innovation
- Improve IAM user experience through AI-driven solutions such as:
- Identity chatbots and virtual assistants
- Simplified access request workflows
- Proactive identity insights and guidance for users
- Reduce friction while maintaining strong security controls and compliance posture.
Strategy, Architecture & Innovation
- Define the enterprise roadmap for AI in IAM, aligned to broader IAM strategy and security priorities.
- Evaluate and integrate emerging capabilities across Okta, SailPoint, CyberArk, cloud platforms, and AI ecosystems.
- Create reference architectures and standards for:
- AI agent identity lifecycle management
- Secure AI integrations with IAM platforms
- Scalable identity models for human and non-human identities
- Act as a thought leader and advisor to senior leadership on AI + IAM strategy.
Required Qualifications
- 10+ years in Identity & Access Management, Security Architecture, or related domain
- Demonstrated experience with IAM platforms such as (Okta, SailPoint, CyberArk, cloud IAM)
- Experience with automation, orchestration, or AI-enabled solutions within security or IT operations
- Strong understanding of:
- Identity lifecycle management
- RBAC/ABAC and least privilege models
- Authentication and authorization frameworks
- Audit and regulatory requirements
- Ability to operate both strategically and hands-on across architecture and execution
Preferred Qualifications
- Experience with AI/ML, GenAI, or agentic systems in enterprise environments
- Familiarity with AI governance frameworks and model risk considerations
- Experience integrating IAM with cloud, APIs, and developer ecosystems
- Background in building automation or AI-driven operational solutions
#LI-Hybrid
#LI-DM1
In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals. For a detailed look at CNA’s benefits, please visit cnabenefits.com.
CNA utilizes AI-enabled technology during the recruiting process. For more information, please visit our careers page.
CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com